Techniques for routing packets within an evolved packet core

ABSTRACT

Various embodiments are generally directed to techniques for improving the routing of control messages among components of a wireless communications system to control the provision of communications services to endpoint devices within a wireless network. An apparatus may include an interface to the network; a virtual switch to retrieve a device identifier of an endpoint device from a payload of a packet and to select a PCRF component to which to route the packet based on the device identifier, the endpoint device coupled to the network; and the selected PCRF component to grant a data session to the endpoint device based on an indication of a request by the endpoint device for the data session conveyed in the payload, the data session comprising an exchange of data between the endpoint device and the interface device through the network. Other embodiments are described and claimed.

BACKGROUND

Various network protocols have been used in communications amongcomponents of wireless communications systems to exchange informationconcerning authentication of users, routing of user data, quality ofservice (QoS), and charging for use of communications based on time,amount of data transferred, etc. For some time, the RemoteAuthentication Dial In User Service (RADIUS) protocol, adopted andpromulgated by the Internet Engineering Task Force (IETF) of theInternet Society (ISOC) of Reston, Va. (becoming IETF 2000, RFC 2865,Remote Authentication Dial In User Service), was widely adopted andused. However, as both the complexity and bandwidth requirements ofcellular communications have increased, various limitations of theRADIUS protocol have become more and more of an issue.

The Diameter protocol, also adopted and promulgated by IETF (becomingIETF 2003, RFC 3588, Diameter Base Protocol, and IETF 2003, RFC 4006Diameter Credit-Control Application), was developed to replace theRADIUS protocol using many of the lessons learned from years ofexperience in using the RADIUS protocol. The Diameter protocol providesbetter security and a more flexible set of standardized messages, aswell as incorporating better support for protocol extensions to betteraccommodate future developments. The Diameter protocol has, as itscreators intended, begun to largely supplant the RADIUS protocol incommunications between components of wireless communications systems.

Unfortunately, the increased flexibility of the Diameter protocol isaccompanied by greater complexity in the formation, transmission andinterpretation of the control messages that adhere to the Diameterprotocol. As a result, use of the Diameter protocol may increaseprocessing requirements and/or the volume of control messages exchangedbetween components of a wireless communications system.

BRIEF DESCRIPTION OF THE DRAWINGS

FIGS. 1 and 2 illustrate an example embodiment of a wirelesscommunications system.

FIG. 3 illustrates an example embodiment of an EPC device.

FIGS. 4A, 4B and 4C each illustrate an example embodiment of a flow ofuser data through a portion of a wireless communications system.

FIGS. 5A and 5B, together, illustrate an example embodiment of routing apacket conveying a control message.

FIGS. 6A and 6B each illustrate an example embodiment of binding data tobind packets conveying control messages to a PCRF component.

FIGS. 7A and 7B, together, illustrates a logic flow according to anembodiment.

FIG. 8 illustrates a processing architecture according to an embodiment.

DETAILED DESCRIPTION

Various embodiments are generally directed to techniques for improvingthe routing of control messages among components of a wirelesscommunications system to control the provision of communicationsservices to endpoint devices within a wireless cellular network. Withinan evolved packet core (EPC) device, a virtual switch that is executedwithin a hypervisor to route packets conveying control messages amongmultiple components executed within virtual machines (VMs) managed bythe hypervisor may be augmented with higher level routing features toreduce the overall number of packets exchanged among the VMs. Among suchhigher level routing features may be the inspection of payloads inpackets that adhere to the Diameter protocol and other routing featuresof a Diameter Routing Agent (DRA).

A wireless communications system may provide a wireless cellular networkto endpoint devices across a relatively wide geographic region in amanner that is divided into one or more zones and/or into multiplecells. The endpoint devices may be any of a variety of types of wirelesscommunications devices capable of wireless cellular communications,including and not limited to, cellular telephones, smart phones, tabletdevices, netbook devices, notebook computers, desktop computers,wireless repeater devices, wireless access points, wirelesscommunications dongles for attachment to other devices, etc. Thewireless communications may include voice, still images, video,documents, spreadsheets, portions of databases, etc.

To provide the wireless cellular network across a relatively widegeographic region, the wireless communications system may incorporatemultiple geographically dispersed base stations that each include atransceiver and antenna to provide a cell that covers a portion of thegeographic region. Multiple ones of the base stations providing wirelesscellular communications across multiple cells in a zone may be coupledto an EPC device that may be accompanied by at least one redundant EPCdevice. Within the EPC device, multiple components of the wirelesscommunications system may be executed within separate VMs provided by avirtual environment routine. The virtual environment routine may also beexecuted to perform various hypervisor functions to oversee theoperation of the other VMs. Among those hypervisor functions may be toprovide a virtual switch that serves as a virtual analog to a networkswitch device by which the components executed within each of the VMsmay be given access to a physical network interface of the EPC.

The use of a single EPC device in which multiple VMs are provided may bean alternative to the use of an EPC made up of multiple separatecomputing devices, each of which may execute a separate one of variouscomponents of the cellular communications network, and which may becoupled through a physical network switch device. Improvements inprocessor components may make such use of a single EPC device in whichmultiple VMs are provided more cost effective and/or more energyefficient than an EPC made up of multiple separate computing devices.

One of the components of the cellular communications network that may beported from execution within a physically distinct computing device toexecution within an EPC device providing multiple VMs may be a routingagent, and the routing agent may be a DRA to route Diameter packetsbased at least partially on the contents of their payloads. With each ofmultiple components of the wireless communications system executedwithin separate computing devices coupled through a physical networkswitch device, a relatively high volume of network traffic may begenerated through that network switch device between the computingdevice on which the routing agent is executed and others of thecomputing devices on which others of the components are executed.However, it may be deemed acceptable to allow such a volume of networktraffic through that network switch device and/or to select a physicalnetwork switch device with sufficient capacity to accommodate thatnetwork traffic.

However, with each of the same multiple components of the wirelesscommunications system, including with routing agent, ported to beexecuted within separate VMs of multiple VMs provided within a singleEPC device, such a relatively high volume of network traffic through avirtual switch that takes over for the physical network switch devicemay not be deemed acceptable. Where a single EPC device providesmultiple VMs within which various components of the wirelesscommunications system are separately executed, the processorcomponent(s) of the single EPC device may need to perform frequentcontext switches to jump among executing each of various componentswithin various VMs, as well as jumping in and out of executing a portionof the virtual environment routine to perform various hypervisorfunctions, including the virtual switch. As recognizable to thoseskilled in the art, such frequent context switching may make relativelyinefficient use of processing resources, and therefore, it may be deemeddesirable to minimize how often context switching occurs where possible.

The virtual environment routine may make use of various techniques tominimize the negative effects of frequent context switches on theefficiency with which processing resources are used. However, therelatively high volume of network traffic through the virtual switchbetween the routing agent and other components of the wirelesscommunications system that are each executed in separate VMs may forceeven more frequent context switching that may overcome the capabilitiesof such techniques and lead to a considerably more inefficient use ofprocessing resources. More specifically, each exchange of a controlmessage between two components of the wireless communications systemthrough the virtual switch may necessitate at least a first contextswitch from the component that transmits the control message and to thevirtual switch that receives the control message, and then a secondcontext switch from the virtual switch after re-transmitting the controlmessage and to the other component that receives the control message asre-transmitted. Thus, where both the source and destination componentsof a control message are executed within separate VMs, and where thevirtual switch is executed as part of the functions provided by thevirtual environment routine, every exchange of a control message betweenthe source and destination component may require a minimum of twocontext switches performed in relatively quick succession.

To minimize the losses in efficiency in using processing resources thatmay arise from such frequent use of context switching and/or otherundesirable effects of a relatively high volume of such network traffic,the virtual switch may be augmented with features of the routing agentsuch that the virtual switch may, itself, perform the functions of therouting agent. This may eliminate the need for such a high volume ofnetwork traffic between the virtual switch provided as a hypervisorfunction of the virtual environment routine and a separate VM in whichthe routing agent may otherwise be executed. Upon receipt of a packet,the virtual switch may first analyze the header of the packet todetermine whether the packet is a control packet. If not, then thevirtual switch may route the packet towards a destination based on anInternet Protocol (IP) address or other indication of the destinationincluded in the header of the packet. Such routing may be regarded as arouting function performed at Layer 3 of the seven layers of the OpenSystems Interconnect (OSI) Reference Model promulgated by theInternational Organization for Standardization (ISO) of GenevaSwitzerland for use in categorizing the activity of devices on anetwork. In so routing a packet determined to not be a control packet,the virtual switch may refrain from inspecting the payload of thatpacket, thereby increasing the speed at which such packets may berouted.

However, if the received packet received is a packet conveying a controlmessage, then the virtual switch may employ the routing agentfunctionality with which the virtual switch has been augmented toanalyze a portion of the payload of the packet to determine the type ofcontrol message that is conveyed within that packet. Again, in someembodiments, packets conveying control messages may be Diameter packetsthat adhere to the Diameter protocol. If the control message is anindication of a request to initiate a data session for an endpointdevice through the wireless communications system (e.g., a Diameter“initiate transaction” message), then the virtual switch may select oneof multiple Policy and Charging Rules Function (PCRF) components, eachof which may be executed within a separate VM of the EPC, to route thecontrol packet to. In so selecting one of the PCRF components, thevirtual switch may engage in load balancing the handling of datasessions supported through the wireless communications system among themultiple PCRF components. In so doing, the virtual switch mayrecurringly exchange packets with each of the PCRF components as part ofmonitoring the status of each, and may base the selection of a PCRFcomponent to which to transmit the control packet on the indications ofstatus received from each of the PCRF components. Alternatively oradditionally, the virtual switch may base that selection on the relativenumbers of data sessions currently supported by each of the PCRFcomponents.

However, if the control message conveyed within the received packet isan indication of an update of some aspect of an ongoing data session(e.g., a Diameter “update transaction” message), then the virtual switchmay determine which PCRF component is the one to which an earliercontrol message conveying an indication of a request for initiation ofthat particular data session was routed, and may route the packet tothat same PCRF component. In effect, the virtual switch may enforce abinding of that data session to that particular PCRF in which thevirtual switch routes subsequent packets conveying control messagesconcerning that data session to that particular PCRF for as long as thatdata session exists. However, in some embodiments, that binding may beextended to include other data sessions that are associated with thesame endpoint device such that the virtual switch effectively binds thatendpoint to that PCRF component. More specifically, the virtual switchmay enforce the binding of any other data session that also involvesthat same endpoint device to that same PCRF component such that thevirtual switch routes packets conveying control messages concerning anydata session associated with that same endpoint device to thatparticular PCRF component. In support of enforcing such bindings, thevirtual switch may maintain a data structure of indications (e.g., atable) of what ongoing data sessions and/or what endpoint devices arecurrently bound to each of the PCRF components. Such an indication of abinding may be added to that data structure when a packet conveying acontrol message that includes an indication of a request to initiate adata session is routed to a selected one of the PCRF components.

Further, if the control message conveyed within the received packetincludes an indication of a request to terminate an ongoing data session(e.g., a Diameter “terminate transaction” message), then the virtualswitch may remove an indication of a binding of that current datasession from that data structure. In some embodiments in which action isrequired by a PCRF component as part of or in response to terminating adata session, the virtual switch may route that packet to the PCRFcomponent to which at least that data session is bound. In otherembodiments in which no action is required by the PCRF component as partof or in response to terminating a data session, the virtual switch mayrefrain from routing that packet to any other component within the EPCdevice.

With general reference to notations and nomenclature used herein,portions of the detailed description which follows may be presented interms of program procedures executed on a computer or network ofcomputers. These procedural descriptions and representations are used bythose skilled in the art to most effectively convey the substance oftheir work to others skilled in the art. A procedure is here, andgenerally, conceived to be a self-consistent sequence of operationsleading to a desired result. These operations are those requiringphysical manipulations of physical quantities. Usually, though notnecessarily, these quantities take the form of electrical, magnetic oroptical signals capable of being stored, transferred, combined,compared, and otherwise manipulated. It proves convenient at times,principally for reasons of common usage, to refer to these signals asbits, values, elements, symbols, characters, terms, numbers, or thelike. It should be noted, however, that all of these and similar termsare to be associated with the appropriate physical quantities and aremerely convenient labels applied to those quantities.

Further, these manipulations are often referred to in terms, such asadding or comparing, which are commonly associated with mentaloperations performed by a human operator. However, no such capability ofa human operator is necessary, or desirable in most cases, in any of theoperations described herein that form part of one or more embodiments.Rather, these operations are machine operations. Useful machines forperforming operations of various embodiments include general purposedigital computers as selectively activated or configured by a computerprogram stored within that is written in accordance with the teachingsherein, and/or include apparatus specially constructed for the requiredpurpose. Various embodiments also relate to apparatus or systems forperforming these operations. These apparatus may be speciallyconstructed for the required purpose or may include a general purposecomputer. The required structure for a variety of these machines willappear from the description given.

Reference is now made to the drawings, wherein like reference numeralsare used to refer to like elements throughout. In the followingdescription, for purposes of explanation, numerous specific details areset forth in order to provide a thorough understanding thereof. It maybe evident, however, that the novel embodiments can be practiced withoutthese specific details. In other instances, well known structures anddevices are shown in block diagram form in order to facilitate adescription thereof. The intention is to cover all modifications,equivalents, and alternatives within the scope of the claims.

FIGS. 1 and 2 illustrate block diagrams of an embodiment of a wirelesscommunications system 1000 providing a wireless cellular network 199.The wireless cellular network 199 may be provided to enable operators ofnumerous endpoint devices 100 to engage in communications that mayinclude the exchange of voice, video, still images, documents, portionsof databases and/or other forms of data in one or more data sessionsamong the endpoint devices 100 and/or between endpoint devices 100 andnetwork device 800 that may not be directly coupled to the wirelesscellular network 199. The operators of the endpoint devices 100 may besubscribers to the wireless cellular network 199 as a service providedby a corporation or other entity that may own, operate and/or maintainthe wireless cellular network 199. The endpoint devices 100 may be anyof a wide variety of types of wireless communications device, includingand not limited to, cellular telephones, portable computers (e.g.,laptop computers, tablet computers, smart phones, etc.), and wirelessnetwork interface controllers (NICs) that may be implemented in the formof a “dongle” able to be coupled to another device to provide that otherdevice with access to the wireless cellular network 199.

As depicted in FIG. 1, the wireless cellular network 199 may be dividedinto multiple zones 1400 that each cover a subset of the relatively widegeographic region covered by the wireless cellular network 199. Inembodiments of the wireless communications system 1000 in which there ismore than one zone 1400, the multiple zones 1400 may be coupled to eachother through a network 999. The network 999 may include a wired and/orwireless network dedicated to the function of coupling multiple zones1400, and may employ dedicated line-of-sight microwave communicationslinkages among towers arranged along rights of way formed on land,and/or line-of-sight wireless communications relayed between locationson land by one or more satellites. Alternatively or additionally, atleast a portion of the network 999 may be routed through and/orotherwise include the Internet, and the network device(s) 800 with whichoperators of the endpoint devices 100 may engage in communications mayalso be coupled to the multiple zones 1400 through the network 999.

As depicted in FIG. 2, each of the one or more zones 1400 may be dividedinto numerous cells 1200. Each cell 1200 may be at least partiallydefined by the wireless transmission and reception range limits of anantenna and a transceiver (not shown) of a base station 200. As may befamiliar to those skilled in the art, the division of a wireless networkinto cells that are each based on a separate base station distributedthroughout the geographic area covered by that wireless network enablesthe use of the same radio frequencies at multiple locations within thegeographic area in a coordinated manner that increases the availablecapacity for wireless communications traffic while avoiding instances ofinterference. Thus, each cell 1200 may incorporate at least one basestation 200 to provide a portion of the wireless cellular network 199within that cell 1200, and one or more endpoint devices 100 to engage inwireless communications with the at least one base station 200 withinthat cell 1200 through the portion of the wireless cellular network 199provided therein.

Referring to both FIGS. 1 and 2, each of the one or more zones 1400 mayincorporate multiple ones of the base stations 200 generating multipleones of the cells 1200 to accommodate use of the wireless cellularnetwork 199 by numerous ones of the endpoint devices 100. Each zone 1400may also incorporate one or more EPC devices 400 to which the basestations 200 of that zone 1400 may be coupled by a base station network299. In each zone 1400, it may be the one or more EPC devices 400 thatcouples that zone 1400 to the network 999, thereby enablingcommunications between an endpoint device 100 within that zone 1400 andeither another endpoint device 100 within a different zone 1400 or anetwork device 800 coupled to the network 999. As more specificallydepicted in FIG. 2, each of the one or more zones 1400 may incorporatemore than one of the EPC devices 400 coupled in a manner enabling thesharing of information from one to another as part of enabling the otherto serve as a back up EPC device 400 to address device failures.

In various embodiments, each EPC device 400 may incorporate one or moreof a processor component 450, a storage 460 and one or more aninterfaces 490 to couple the EPC device 400 to the base station network299 and/or to the network 999. The storage 460 may store one or more ofa virtual environment routine 410, a control routine 440, endpointaccount data 430 and binding data 434. Each of the virtual environmentroutine 410 and the control routine 440 may incorporate a sequence ofinstructions operative on the processor component 450 to implement logicto perform various functions.

The processor component 450 may be caused by execution of the virtualenvironment routine 410 to generate multiple VMs 470 within whichvarious components of the control routine 440 may be separately executedby the processor component 450. Among those components of the controlroutine 440 may be components that control initiation, QoS, terminationand/or other aspects of communications among the endpoint devices 100and/or between the endpoint devices 100 and other devices (e.g., thenetwork devices 800), through at least a portion of the wirelesscellular network 199. FIG. 3 illustrates a block diagram of a portion ofan embodiment of the wireless communications system 1000 of FIGS. 1 and2 in greater detail. More specifically FIG. 3 depicts aspects of theoperating environment of an example embodiment of the EPC device 400 inwhich the processor component 450, including aspects of the provision ofseparate VMs 470 for the execution of each of various components of thecontrol routine 440 as a result of execution of the virtual environmentroutine 410.

More specifically, the control routine 440 may incorporate one or morecomponents of the wireless communications system 1000 that cooperate tocontrol the provision of communications services to the endpoint devices100, including and not limited to, a serving gateway 442, a packetgateway 448, and a quantity of PCRF components labeled 445 a through 445x. In turn, the packet gateway 448 may incorporate a Policy Charging andEnforcement Function (PCEF) component 447. Execution of the controlroutine 440 by the processor component 450 may entail the execution ofone or more of the components 442, 445 a-x, 447 and 448.

The virtual environment routine 410 may incorporate a virtual switch413, which may in turn incorporate a routing agent 414. Upon executingthe virtual environment routine 410, the processor component 450 mayinstantiate a separate VM 470 for the execution by the processorcomponent 450 of each of the serving gateway 442 and the packet gateway448, as well as for the execution of each of the PCRF components 445a-x. In contrast, execution of the virtual environment routine 410 bythe processor component 450 may be executed outside any VM, and may beaccompanied by additional access privileges that enable the virtualenvironment routine 410 to perform various hypervisor functions tomonitor, support and/or control the provision of each of the VMs 470and/or the execution of each of the components of the wirelesscommunications system 1000 that is executed within one of the VMs 470.Execution of the virtual environment routine 410 to provide varioushypervisor functions may entail execution of the virtual switch 413and/or the routing agent 414, one or both of which may employ suchadditional access privileges in providing an analog to at least aphysical network switch device coupled to the components 442, 445 a-x,447 and/or 448 of the control routine 440.

The serving gateway 442 may control operation of one or more basestations 200 to provide one or more of the cells 1200 making up thewireless cellular network 199. The serving gateway 442 may recurringlyoperate each base station 200 to determine which endpoint devices 100are currently located within the coverage area of each of the cells1200. The serving gateway 442, in cooperation with a mobile managemententity (MME, not shown), may also track movement of endpoint devices 100between cells 1200 and/or coordinate the associated handoff between thebase stations 200 of cells 1200 that endpoint devices 100 move between.The serving gateway 442 may also receive requests from endpoint devices100 (as relayed through the base stations 200) for communicationsservices, including initiating and/or terminating a data session inwhich an endpoint device 100 may transmit and/or receive data. Such datamay represent voice, still images, video, documents, etc. During such adata session, the serving gateway 442 may relay such data between a basestation 200 with which an endpoint device 100 is wirelesslycommunicating and the packet gateway 448.

The packet gateway 448 may relay data packets that convey dataassociated with an endpoint device 100 to and from the serving gateway442, and/or between the serving gateway 442 and the network 999,depending on what other device that endpoint device 100 in exchangesthat data with during a data session. The packet gateway 448 maygenerate a packet conveying an indication of a request forcommunications services received from an endpoint device 100 to thevirtual switch 413 to be relayed to one of the PCRF components 445 a-x.If such a request for communications services is granted by one of thePCRF components 445 a-x, then the packet gateway 448 may receivecommands from that one of the PCRF components 445 a-x to enable theprovision of those communications services. In response, the packetgateway 448 may cooperate with the serving gateway 442 to route packetsof data in a data session between that endpoint device 100 and the otherdevice with which that endpoint device 100 is to communicate.

As the packet gateway 448 so cooperates with the serving gateway 442,the PCEF component 447 may receive commands from the same one of thePCRF components 445 a-x to monitor and/or control various aspects of thedata session in accordance with a policy that may be associated withthat endpoint device 100 and/or the identity of a particular operator ofthat endpoint device 100. By way of example, there may be differentrates of charging for communications services depending on the quantityand/or type of data exchanged in a data session, whether the otherdevice with which the data is exchanged is within the same wirelesscellular network 199 and/or within the same zone 1400, the current timeof day and/or day of week, etc. The PCEF component 447 may monitorvarious aspects of the data that is exchanged, and convey indications ofthose aspects to that same one of the PCRF components 445 a-x for use indetermining an amount to charge. Also by way of example, there may be aspecific limit associated with that endpoint device 100 and/or aparticular operator of that endpoint device 100 on the type(s) and/orquantity of data that may be exchanged in a data session. By way ofanother example, there may be a specific limit on the data rate at whichdata may be exchanged in a data session (e.g., a specific level of QoSspecified), and that limit may be dependent on whether the other devicewith which the data is exchanged is within the same wireless cellularnetwork 199 and/or with the same zone 1400, the current time of dayand/or day of week, etc. The PCEF component 447 may enforce one or moreof such limits on the exchange of data.

FIGS. 4A-C illustrate example embodiments of a flow of data packetsconveying data in a data session that may be supported by cooperationbetween the serving gateway 442 and the packet gateway 448, as directedby one of the PCRF components 445 a-x. As just described, depending onthe nature of the policy on which charging for communications servicesis based, each of these flows of data may be associated with a differentrate of charging (e.g., per unit of data and/or per amount of time usedin exchanging data). As also just described, depending on the nature ofthe policy on which any limitations on the exchange of data may bebased, each of these flows of data may be associated with differentrestrictions on amount of data that may be exchanged (e.g., a monthlycap on the amount of data that may be exchanged) and/or on a rate atwhich data may be exchanged (e.g., a specified level of QoS that mayinclude a specification of a maximum data rate).

FIG. 4A depicts an example of a flow of data packets conveying user databetween two endpoint devices 100 that are either within the same cell1200 or are within cells 1200 of the same zone 1400 such that bothendpoint devices 100 may communicate with the same EPC device 400through either the same base station 200 or different base stations 200that are coupled to that same EPC device 400. The same serving gateway442 may operate the same interface 490 to both receive and transmit databetween the packet gateway 448 and each of the endpoint devices 100. Asthe flow of each data packet reaches the packet gateway 448 from one ofthe endpoint devices 100 and is transmitted back towards the other, thePCEF component 447 may monitor and/or impose a specified limit on theflow of data (e.g., a specified QoS) as directed by one of the PCRFcomponents 445 a-x.

FIG. 4B depicts an example of a flow of data packets conveying user databetween an endpoint device 100 within the wireless cellular network 199and a network device 800 coupled to the network 999. The serving gateway442 may operate one of the interfaces 490 to exchange the data with theendpoint device 100 and the packet gateway 448 may operate another ofthe interfaces 490 to exchange the data with the network device 800. Asthe flow of each data packet reaches the packet gateway 448 from one ofthe endpoint device 100 or the network device 800, and progressestowards the other, the PCEF component 447 may monitor and/or impose aspecified limit on the flow of data as directed by one of the PCRFcomponents 445 a-x.

FIG. 4C depicts an example of a flow of data packets conveying user databetween two endpoint devices 100 that are coupled to different EPCdevices 400 such that the data must be exchanged therebetween throughthe network 999. Within each of the depicted EPC devices 400, theserving gateway 442 may operate one of the interfaces 490 to exchangethe data with the endpoint device 100 and the packet gateway 448 mayoperate another of the interfaces 490 to exchange the data with theother of these two EPC devices 400 through the network 999. As the flowof each data packet passes through the packet gateway 448 within each ofthese depicted EPC devices 400, the PCEF component 447 within each maymonitor and/or impose a limit on the flow of data as directed by one ofthe PCRF components 445 a-x.

Returning to FIG. 3, each of the PCRF components 445 a-x may employ anindication of a device ID received from one of the endpoint devices 100requesting communications services to retrieve from the endpoint accountdata 430 indications of various parameters of available communicationsservices that may be associated with that endpoint device 100 and/or theidentity of an operator of that endpoint device 100. More specifically,the endpoint account data 430 may include, for each of multiple deviceIDs of multiple ones of the endpoint devices 100, indications of whatcommunications services may be available, along with indications ofpolicies for charging for the use of each of those communicationsservices and/or indications of policies of limitations on such use(e.g., a specified maximum level of QoS). Again, each of the PCRFcomponents 445 a-x may provide commands to the PCEF component 447 toenact one or more of such policies.

The virtual switch 413, in cooperation with the routing agent 414, mayexamine the header and/or payload of each packet received from at leastthe packet gateway 448 to determine whether that packet is to be routedtowards one of the PCRF components 445 a-x, and if so, may select thatone of the of the PCRF components 445 a-x based on a load balancingscheme and/or a binding of one or more data sessions to that one of thePCRF components 445 a-x. More specifically, the virtual switch 413 mayinspect the header of a received packet to determine whether the packetis of a particular type employed at least by the packet gateway 448 toconvey control messages adhering to a particular protocol (e.g., theDiameter protocol). If not, then the virtual switch 413 may route thatpacket to another component of the wireless communications system 1000that may be executed within a VM 470 without inspecting the contents ofthe payload of that packet. However, if the packet is of that particulartype, then the routing agent 414 may examine at least a portion of thepayload of that packet to identify the type of control message that isconveyed within the packet, an identifier of a data session associatedwith the packet and/or an identifier of one of the endpoint devices 100,and may route that packet to one of the PCRF components 445 a-x based atleast on those contents.

FIGS. 5A-B, together, illustrate an example embodiment of identifyingand routing packets conveying such control messages to selected ones ofthe multiple PCRF components 445 a-x in more detail. FIG. 5A depictsaspects of a packet that may be exchanged between the serving gateway442 and the packet gateway 448, where the packet may or may not convey acontrol message such that the packet is to be routed to one of the PCRFcomponents 445 a-x. FIG. 5B depicts aspects of routing a packet receivedfrom the packet gateway 448 to one of the multiple PCRF components 445a-x.

Turning to FIG. 5A, the serving gateway 442 may exchange a wide varietyof pieces of data in a data session (e.g., voice, images, documents,etc.) and control messages (e.g., indications of status, requests forservices and/or responses thereto, etc.) with an endpoint device 100 viaa portion of the wireless cellular network 199, a base station 200 andthe base station network 299. In response to receiving either data or acontrol message from the endpoint device 100, the serving gateway 442may generate a packet 571 that includes a header 572 and a payload 573for use in conveying the data or the control message to the packetgateway 448 to be acted upon by the packet gateway 448 and/or relayed bythe packet gateway 448 elsewhere.

The data or control message received from the endpoint device 100 may beaccompanied by a device ID 130 that may be uniquely assigned to theendpoint device 100 at the time of its manufacture or at the time it isconfigured for use with the wireless cellular network 199. In generatingthe header 572, an identifier generator 4422 may generate an IP address131 that the serving gateway 442 may assign to all packets 571 used toconvey data and/or control messages received from that particularendpoint device 100. Thus, in effect, the identifier generator 4422 mayassign an IP address to the endpoint device 100. In various embodiments,the IP address 131 may remain associated with that particular endpointdevice 100 until that endpoint device 100 is no longer detected by theserving gateway 442 within the wireless cellular network 199 and/oruntil the endpoint device 100 ceases to engage in communications on thewireless cellular network 199 for a predetermined period of time.

In some embodiments, where the packet 571 is generated to convey datareceived from the endpoint device 100 in the payload 573 to the packetgateway 448 for routing onward to another endpoint device 100 or to anetwork device 800 that must be reached through the network 999, the IPaddress 131 may be used by the packet gateway 448 as an identifier ofthe source of the data in relaying the data onward by transmitting it inanother packet onto the network 999. Thus, the IP address 131 may beused to identify the endpoint device 100 on the Internet.

However, where the packet 571 is generated to convey a control message135 to the packet gateway 448, the payload 573 may contain the controlmessage 135 and the device ID 130. In some embodiments where the packet571 is generated to convey a control message, the IP address 131 may beincluded in the header 572 to enable the packet gateway 448 todistinguish packets associated with one endpoint device 100 from packetsassociated with other endpoint devices 100 by the IP address 131 in theheader 572, instead of requiring the packet gateway 448 to retrieve thedevice ID 130 from the payload 573. The packet 571 may be generatedand/or conveyed to the packet gateway 448 in accordance with aparticular protocol intended for packets conveying control messages. Insome embodiments, the protocol so used may be the Stream ControlTransmission Protocol (SCTP) promulgated by IETF for use in conveyingcontrol messages related to controlling the exchange of data.

Turning to FIG. 5B, upon receiving the packet 571 conveying the controlmessage 135 (and regardless of the exact protocol employed in conveyingthe control message 135 to the packet gateway 448), the packet gateway448 may generate a corresponding packet 671 to convey a correspondingcontrol message 635 to the virtual switch 413 to be processed and/orrelayed to another component within the EPC device 400 (e.g., one of thePCRF components 445 a-x). As will be explained in greater detail, thecontrol message 635 may convey an indication to one of the PCRFcomponents 445 a-x of the control message 135 having been received bythe packet gateway 448 from an endpoint device 100. The packet gateway448 may generate the packet 671 to conform to a particular protocol(e.g., the Diameter protocol) for conveying the control message 635providing an indication of the control message 135 having been receivedfrom the endpoint device 100. Indeed, the packet gateway 448 maygenerate the packet 671 to so conform to a particular protocol as amechanism to indicate to the virtual switch 413 that what is conveyed inthe packet 671 is a control message, rather than data or still othertypes of content which the packet gateway 448 may provide to the virtualswitch 413 in packets that do not conform to that particular protocol.In some embodiments, the protocol employed in conveying the controlmessage 135 to the packet gateway 448 may be different than the protocolto be employed in conveying the control message 635 to the virtualswitch 413. By way of example, while the protocol that may be employedby the packet gateway 448 in conveying the control message 635 to thevirtual switch 413 may be the Diameter protocol, the protocol by whichthe control message 135 to the packet gateway 448 may be a differentprotocol.

As depicted, the packet 671 may incorporate a header 672 and a payload673. The header 672 may include an indication of a packet type of thepacket 671. By way of example, where packet 671 is generated to conformto a particular protocol (e.g., the Diameter protocol), the header 672may include an indication in one or more bits of a bit field of thepacket 671 so conforming to that protocol. Not unlike the payload 573 ofthe packet 571, the payload 673 of the packet 671 may include at leastthe device ID 130 in addition to the control message 635. In generatingthe packet 673 to convey the control message 635 to the virtual switch413, the packet gateway 448 may include an IP address of the packetgateway 448 in the header 672, and not the IP address 130 of theendpoint devices 100 from which the control message 135 was receivedthat caused the packet 673 to be generated (the identity of thatendpoint device 100 is already conveyed by the device ID 130 included inthe payload 673).

In some embodiments, the payload 673 may also include a data session ID630, that uniquely identifies the data session that the control message135 conveyed in the packet 571 and the control message 635 conveyed inthe packet 671 are associated with. As previously discussed, in someembodiments, an endpoint device may be engaged in exchanging data inmultiple data sessions that are ongoing at the same time. In suchembodiments, it may be that different types of data are exchanged inseparate data sessions. Thus, for example, if an endpoint device isoperated to engage in both voice communications (e.g., voice overInternet Protocol, or VOIP) and the exchange of a portion of a website(e.g., a download of a webpage), the data representing voice(s) in thevoice communications may be exchanged in a separate data session thanthe data representing the portion of the website. An identifiergenerator 4488 of the packet gateway 448 may generate a unique datasession ID 630 for each data session, and may include that data sessionID in the payload 673 of each packet 671 that conveys a control message635 associated with that data session.

Upon receipt of the packet 671, a packet type identifier 4138 of thevirtual switch 413 may analyze the header 672 to identify the type ofpacket. Again, the packet gateway 448 may generate the packet 671 toadhere to a particular protocol to provide the virtual switch 413 withan indication that what is conveyed in the packet 671 is a controlmessage. The fact of the packet 671 having been created to adhere tothat particular protocol to convey a control message (e.g., the controlmessage 635) to the virtual switch 413 may be reflected in theindication of packet type in the header 672. Thus, if the packet typeidentifier 4138 finds no indication of the packet 671 being of a packettype generated to conform to the particular protocol used by the packetgateway 448 to convey a control message, then the packet type identifier4138 may deem the packet 671 to be of a different type that may berouted based on an indication of a destination in the header 672. As aresult, the packet type identifier 4138 may refrain from analyzing anyportion of the payload 673 (which may add to the amount of time requiredto route the packet 671), and a lower layer router 4135 of the routingagent 4435 may so route the packet 671 based on an indication of adestination for the packet 671 in the header 672 (e.g., an IP address)in a manner consistent with routing at Layer 3 of the OSI model. Itshould be noted that one or more other types of packets to convey dataand/or other information that may not be associated with controlling theprovision of communications services may be exchanged through thevirtual switch 413 among various components of the cellularcommunications network 1000 that are executed within the EPC device 400.Such other types of packets may be generated to include an IP address orother indication in the header of one of those components as thedestination, and it may be deemed appropriate for the virtual switch 413to employ such an indication in the header of those packets to routethose packets as just described.

However, if the packet type identifier 4138 does find an indication ofthe packet 671 being of a packet type generated to conform to theparticular protocol used by the packet gateway 448 to convey a controlmessage, then a message type identifier 4148 of the routing agent 414may examine the control message 635 conveyed within the payload 673 todetermine what is the type of the control message 635. By way ofexample, the control message 635 may include an indication of the packetgateway 448 having received a corresponding control message 135requesting initiation of a data session for one of the endpoint devices100, requesting updating of an aspect of an ongoing data session, orrequesting termination of an ongoing data session. However, depending onat least the particular protocol used (e.g., the Diameter protocol),there may be other types of control messages in addition to and/or inlieu of these three examples.

If the message type identifier 4148 determines that the control message635 includes an indication of a request to initiate a data session forone of the endpoint devices 100 (e.g., a Diameter “initiate transaction”message), then a selection component 4146 of the routing agent 414 mayretrieve the device ID 130 of that one of the endpoint devices 100and/or the data session ID 630 of the data session associated with therequest from the payload 673. The selection component 4146 may then usethe device ID 130, the data session ID 630 and/or one or more loadbalancing rules to select one of the PCRF components 445 a through 445 xto be the PCRF component to which the packet 671 is to be routed for adetermination of whether to grant the requested data session and/or withwhat restrictions. Once the selection is made, an upper layer router4145 of the routing agent 414 may then route the packet 673 to theselected one of the PCRF components 445 a-x. Also, once the selection ismade, the selection component 4146 may store within the binding data 434an indication of which one of the PCRF components 445 a-x is nowcorrelated to the device ID 130 and/or the data session ID 630.

FIG. 6A depicts an example of the manner in which indications of suchcorrelations of each of the PCRF components 445 a-x to the device IDs130 of multiple ones of the endpoint devices 100 and/or to the datasession IDs 630 of multiple data sessions may be stored in the bindingdata 434. As depicted, in some embodiments, the binding data 434 mayinclude an entry for each of the PCRF components 445 a-x in which thedevice IDs 130 of the endpoint devices 100 correlated with that PCRFcomponent 445 a-x may be stored. When one of the PCRF components 445 a-xis selected by the selection component 4146 to receive a packet 671conveying an indication of receipt of a request (e.g., the controlmessage 135) to initiate a data session for a particular one of theclient devices 100, the entry for that selected one of the PCRFcomponents 445 a-x may be augmented with the device ID 130 of thatparticular one of the client devices 100. The addition of that device ID130 to that entry may serve as an indication that the selected one ofthe PCRF components 445 a-x associated with that entry is to receive oneor more subsequent packets 671 conveying other control messages 635associated with at least that data session if the request to initiatethat data session is granted. Thus, as previously discussed, the loadbalancing among the PCRF components 445 a-x performed by the selectioncomponent 4146 may not be simply for the handling of the one packet 671conveying the indication of a request for initiation of that datasession, but may also be for the handling of subsequent packets 671conveying other control messages 635 conveying other indicationsassociated with that same data session. Further, it may be that such anindication of a correlation between that device ID 130 and the selectedone of the PCRF components 445 a-x also results in the routing to theselected one of the PCRF components 445 a-x of still other packets 671conveying control messages associated with other data sessions that arealso associated with that same one of the client devices 100. Stateddifferently, such an indication of a correlation between a particularone of the PCRF components 445 a-x and a particular device ID 130 of aparticular one of the endpoint devices 100 may serve to bind all datasessions associated with that one of the endpoint devices 100 to thatselected one of the PCRF components 445 a-x such that all packetsconveying control messages concerning any of those data sessions arerouted to that selected one of the PCRF components 445 a-x.

As also depicted in FIG. 6A, the binding data 434 may additionallyinclude a configuration data 435. The configuration data 435 may includeindications of one or more load balancing rules that may be employed bythe selection component 4146 in selecting one of the PCRF components 445a-x to become bound, as just described, to receiving and processing whatmay become multiple packets 671 conveying control messages 635concerning data session(s) associated with a particular endpoint device100 (as identified by its device ID 130). In some embodiments, such loadbalancing rules may direct the selection component 4146 to employ arelatively simple round-robin approach to selecting PCRF components 445a-x. In other embodiments, such load balancing rules may direct theselection component 4146 to take into account the number of device IDs130 already indicated in the binding data 434 as correlated to each ofthe PCRF components 445 a-x. Stated differently, the selection component4146 may be caused to take into account how many of the endpoint devices100 (as identified by their device IDs 130) may have data sessions thatare already bound to each of the PCRF components 445 a-x, and to balancethat quantity of bindings of data sessions associated with endpointdevices 100 among the PCRF components 445 a-x.

In still other embodiments, such load balancing rules may direct theselection component 4146 to take into account the amount of activity ofeach of the PCRF components 445 a-x in handling packets 671 conveyingcontrol messages 635 arising from the bindings already made to each ofthe PCRF components 445 a-x. This may be in recognition of the manner inwhich each data session may differ from others in terms of the number ofcontrol messages 635 that may be associated with each such that one ofthe PCRF components 445 a-x may be subjected to a greater amount ofactivity than another of the PCRF components 445 a-x even as both areassociated with the same quantity of bindings to data sessions. In suchembodiments, and referring momentarily back to FIG. 5B, a statuscomponent 4144 of the routing agent 414 may exchange packets on arecurring basis with each of the PCRF components 445 a-x to recurringlyreceive indications of status from each. More specifically, the statuscomponent 4144 may recurringly receive packets from each of the PCRFcomponents 445 a-x indicating the amount of activity that each isengaged in as a result of handling packets 671 conveying controlmessages 635.

It should be noted that, in some embodiments, the load balancing rulesmay include allocations of ranges of device IDs 130 to particular setsof the PCRF components 445 a-x such that load balancing for a particulardevice ID 130 may occur among a subset of the PCRF components 445 a-xthat are allocated a range of device IDs 130 that include the particulardevice ID 130. This may be done in relatively large embodiments of thecommunications control system 1000 that support the operation of arelatively large embodiment of the wireless cellular network 199 suchthat there may be a relatively large quantity of endpoint devices 100.In such situations, the quantity of account data associated with each ofthe endpoint devices 100 may be sufficiently large that it is deemeddesirable to divide that account data into portions associated withdifferent ranges of device IDs 130, and to make each of those portionsaccessible to different subsets of the PCRF components 445 a-x.

Regardless of the exact manner in which load balancing and/or otherconsiderations may cause the data sessions of a particular endpointdevice 100 to be bound to a particular one of the PCRF components 445a-x, in some embodiments, such bindings may be given a persistent or“sticky” characteristic. Stated differently, it may be that once a datasession of a particular endpoint device 100 has been bound to aparticular one of the PCRF components 445 a-x, any future data sessionsassociated with that same endpoint device 100 may also be bound to thatsame one of the PCRF components 445 a-x, even after a lengthy period ofinactivity on the part of that particular endpoint device 100 in whichthere are no data sessions associated with that particular endpointdevice 100. This may be another approach taken to manage a relativelylarge quantity of account data associated with a relatively largequantity of endpoint devices 100.

As previously discussed, some embodiments of the wireless communicationssystem 1000 may support the engagement of each of the endpoint devices100 in more than one data session through the wireless cellular network199. Again, communications associated with the exchange of each ofdifferent types of data may each be deemed to be communicationsassociated with a different data session. Thus, for example, an endpointdevice 100 engaging in a combination of voice communications carried outat the same time as an exchange of data of a spreadsheet may be deemedto be a situation in which there are two simultaneously occurring datasessions engaged in by that one endpoint device 100. As also previouslydiscussed, in such embodiments, the packet gateway 448 (or anothercomponent executed within the EPC device 400) may assign a unique datasession ID 630 to each such data session, and those data session IDs 630may be retrieved from the payload 673 and used along with device IDs 130in routing packets to different ones of the PCRF components 445 a-x.Stated differently, bindings involving the PCRF components 445 a-x maybe determined on a per data session basis in addition to or in lieu of abasis of per endpoint device 100.

In such other embodiments, and as depicted in FIG. 6B, the entries foreach of the PCRF components 445 a-x may include indications ofcorrelations to both device IDs 130 associated with each of the endpointdevices 100 and data session IDs 630 associated with the one or moredata sessions associated with each of those endpoint devices 100.Regardless of the exact manner in which one of the PCRF components 445a-x is selected to receive the packet 671 in which the control message635 indicates the reception of a request to initiate a data session(e.g., the control message 135 received from the endpoint device 100),and referring momentarily back to FIG. 3, that one of the PCRFcomponents 445 a-x may retrieve account from the endpoint account data430 information associated with the endpoint device 100 that isassociated with that control message 635 and/or with an operator of thatendpoint device 100 to determine whether or not to grant that request.By way of example, the account associated with that endpoint device 100may be past due in payments for the provision of communications servicesto that endpoint device 100 such that the selected one of the PCRFcomponents 445 a-x determines that the request should not be granted.However, if the data session that is requested to be initiated is for anemergency call to authorities (e.g., to summon aid from police, anambulance service or a fire department), then the selected one of thePCRF components 445 a-x may grant the request in spite of the past duesituation as part of a policy of not blocking voice calls for emergencyservices. Returning to FIG. 5B, regardless of the basis on which arequest to initiate a data session is granted, such granting may resultin the selected one of the PCRF components 445 a-x conveying a packetthrough the virtual switch 413 to the packet gateway 448 to so initiatethe data session, and a packet through the virtual switch 413 to thePCEF component 447 to enforce one or more restrictions on that datasession, as previously discussed.

However, if the message type identifier 4148 determines that the controlmessage 635 includes an indication of a request to update an aspect of acurrent data session (e.g., the control message 635 includes a Diameter“update transaction” message) associated with a particular one of theendpoint devices 100, then the upper layer router 4145 may retrieve fromthe binding data 434 an indication of which one of the PCRF components445 a-x is already bound to handle packets conveying control messages635 associated with that particular data session and/or for all datasessions associated with that particular one of the endpoint devices100. The upper layer router 4145 may then route the packet 671 to theone of the PCRF components 445 a-x that is indicated in the binding data434 to be so bound. In so referring to the binding data 434 to retrieveindications of correlations therefrom, the upper layer router 4145 mayenforce the bindings earlier created by the selection component 4146. Invarious embodiments, a request to update an aspect of a current datasession may be used to provide an indication to one of the PCRFcomponents 445 a-x of any of a variety of changes in a current datasession, including and not limited to, which cell 1200 an endpointdevice 100 has moved to, how long a data session has been underway, howmuch data has been exchanged during a data session, etc.

Alternatively, if the message type identifier 4148 determines that thecontrol message 635 includes an indication of a receipt of a request toterminate a current data session (e.g., the control message 635 includesa Diameter “terminate transaction” message) associated with a particularone of the endpoint devices 100, then the upper layer router 4145 mayretrieve from the binding data 434 an indication of which one of thePCRF components 445 a-x is already bound to handle packets conveyingcontrol messages for that particular data session and/or for all datasessions associated with that particular one of the endpoint devices100. In some embodiments, the upper layer router 4145 may then route thepacket 671 to the one of the PCRF components 445 a-x that is indicatedin the binding data 434 to be so bound, and may also remove theindication of the binding from the binding data 434. However, in otherembodiments, termination of a data session may not require furtheraction by one of the PCRF components 445 a-x, and the upper layer router4145 may refrain from relaying the packet 671 to any of the PCRFcomponents 445 a-x as the upper layer router 4145 removes the indicationof the binding from the binding data 434.

Returning to FIGS. 1 and 2, more generally, each of the devices 100, 400and 800 may be any of a variety of types of computing device, includingwithout limitation, a desktop computer system, a data entry terminal, alaptop computer, a netbook computer, a tablet computer, a handheldpersonal data assistant, a smartphone, smart glasses, a smartwristwatch, a digital camera, a smart card incorporating a processorcomponent, a body-worn computing device incorporated into clothing, acomputing device integrated into a vehicle (e.g., a car, a bicycle, awheelchair, etc.), a server, a cluster of servers, a server farm, etc.

Each of the virtual environment routine 410 and the control routine 440may include one or more of an operating system, device drivers and/orapplication-level routines (e.g., so-called “software suites” providedon disc media, “applets” obtained from a remote server, etc.). Where anoperating system is included, the operating system may be any of avariety of available operating systems appropriate for the processorcomponent 450. Where one or more device drivers are included, thosedevice drivers may provide support for any of a variety of othercomponents, whether hardware or software components, of the EPC device400.

Also more generally, each of the networks 299 and 999 may be a singlenetwork possibly limited to extending within a single building or otherrelatively limited area, a combination of connected networks possiblyextending a considerable distance, and/or may include the Internet.Thus, each of the networks 299 and 999 may be based on any of a variety(or combination) of communications technologies by which signals may beexchanged, including without limitation, wired technologies employingelectrically and/or optically conductive cabling, and wirelesstechnologies employing infrared, radio frequency or other forms ofwireless transmission.

In various embodiments, the processor component 450 may include any of awide variety of commercially available processors. Further, one or moreof these processor components may include multiple processors, amulti-threaded processor, a multi-core processor (whether the multiplecores coexist on the same or separate dies), and/or a multi-processorarchitecture of some other variety by which multiple physically separateprocessors are in some way linked.

In various embodiments, the storage 460 may be based on any of a widevariety of information storage technologies, possibly including volatiletechnologies requiring the uninterrupted provision of electric power,and possibly including technologies entailing the use ofmachine-readable storage media that may or may not be removable. Thus,each of these storages may include any of a wide variety of types (orcombination of types) of storage device, including without limitation,read-only memory (ROM), random-access memory (RAM), dynamic RAM (DRAM),Double-Data-Rate DRAM (DDR-DRAM), synchronous DRAM (SDRAM), static RAM(SRAM), programmable ROM (PROM), erasable programmable ROM (EPROM),electrically erasable programmable ROM (EEPROM), flash memory, polymermemory (e.g., ferroelectric polymer memory), ovonic memory, phase changeor ferroelectric memory, silicon-oxide-nitride-oxide-silicon (SONOS)memory, magnetic or optical cards, one or more individual ferromagneticdisk drives, or a plurality of storage devices organized into one ormore arrays (e.g., multiple ferromagnetic disk drives organized into aRedundant Array of Independent Disks array, or RAID array). It should benoted that although each of these storages is depicted as a singleblock, one or more of these may include multiple storage devices thatmay be based on differing storage technologies. Thus, for example, oneor more of each of these depicted storages may represent a combinationof an optical drive or flash memory card reader by which programs and/ordata may be stored and conveyed on some form of machine-readable storagemedia, a ferromagnetic disk drive to store programs and/or data locallyfor a relatively extended period, and one or more volatile solid statememory devices enabling relatively quick access to programs and/or data(e.g., SRAM or DRAM). It should also be noted that each of thesestorages may be made up of multiple storage components based onidentical storage technology, but which may be maintained separately asa result of specialization in use (e.g., some DRAM devices employed as amain storage while other DRAM devices employed as a distinct framebuffer of a graphics controller).

In various embodiments, at least a portion of the interface(s) 490 mayemploy any of a wide variety of signaling technologies enabling thesecomputing devices to be coupled to other devices as has been described.Each of these interfaces includes circuitry providing at least some ofthe requisite functionality to enable such coupling. However, each ofthese interfaces may also be at least partially implemented withsequences of instructions executed by corresponding ones of theprocessor components (e.g., to implement a protocol stack or otherfeatures). Where electrically and/or optically conductive cabling isemployed, these interfaces may employ signaling and/or protocolsconforming to any of a variety of industry standards, including withoutlimitation, RS-232C, RS-422, USB, Ethernet (IEEE-802.3) or IEEE-1394.Where the use of wireless signal transmission is entailed, theseinterfaces may employ signaling and/or protocols conforming to any of avariety of industry standards, including without limitation, IEEE802.11a, 802.11b, 802.11g, 802.16, 802.20 (commonly referred to as“Mobile Broadband Wireless Access”); Bluetooth; ZigBee; or a cellularradiotelephone service such as GSM with General Packet Radio Service(GSM/GPRS), CDMA/1×RTT, Enhanced Data Rates for Global Evolution (EDGE),Evolution Data Only/Optimized (EV-DO), Evolution For Data and Voice(EV-DV), High Speed Downlink Packet Access (HSDPA), High Speed UplinkPacket Access (HSUPA), 4G LTE, etc.

FIGS. 7A and 7B, together, illustrate an embodiment of a logic flow2100. The logic flow 2100 may be representative of some or all of theoperations executed by one or more embodiments described herein. Morespecifically, the logic flow 2100 may illustrate operations performed bythe processor component 450 in executing at least the control routine440, and/or performed by other component(s) of the EPC device 400. Inparticular, the logic flow 2100 is focused on operations to routepackets in greater detail.

At 2110, a virtual switch executed by a processor component of an EPCdevice (e.g., the virtual switch 413 executed by the processor component450 of the EPC device 400) receives a packet (e.g., the packet 671). Aspreviously discussed, the packet may be generated by a packet gatewayexecuted by the processor component within a VM (e.g., the packetgateway 448 executed within one of the VMs 470).

At 2120, the processor component, in executing the virtual switch, mayanalyze the header of the packet (e.g., the header 672) to determine itspacket type. As previously discussed, the packet may be generated duringexecution of the packet gateway to conform to the specification of aparticular protocol (e.g., the Diameter protocol) if the packet isgenerated to convey a control message concerning the provision of a datasession to one or more endpoint devices (e.g., the control message 635concerning providing a data session to one or more of the endpointdevices 100) to the virtual switch. As part of generating the packet toso conform to that particular protocol, the header of the packet mayinclude an indication of the packet having been generated to conform tothat particular protocol. Alternatively, the packet may be generatedduring execution of the packet gateway to not conform to that protocolif the packet is generated to convey data and/or other content in itspayload that does not include such a control message.

At 2122, if the packet is not of a packet type conforming to theparticular protocol for conveying such control messages, then theprocessor component, in executing the virtual switch, may route thepacket at 2124 based on an indication of its destination in its header.As has been discussed, such an indication in the header may be an IPaddress, and as has been discussed, such routing of the packet may beregarded as routing at Layer 3 of the OSI model of network activity.

However, if at 2122, the packet is of a packet type conforming to thatparticular protocol, then the processor component, in executing arouting agent incorporated into the virtual switch (e.g., the routingagent 414), may analyze an indication of the type of control messageconveyed within the payload of the packet (e.g., the control message 635within the payload 673) at 2130. As has been discussed, such examinationof the contents of the payload as part of routing the packet may beregarded as routing at Layer 7 of the OSI model of network activity.

At 2140, if the control message indicates reception of a request for theinitiation of a data session (e.g., reception of a control message 135from one of the endpoint devices 100 requesting initiation of a datasession), then the processor component may retrieve the device ID ofthat endpoint device (e.g., a device ID 130) from the payload of thepacket at 2142 as part of executing the routing agent. As has also beendiscussed, in some embodiments, the processor component may alsoretrieve from the payload a data session ID (e.g., a data session ID630) that may have been assigned by the packet gateway to the datasession that may be initiated if the request for initiation ofcommunications services is granted.

At 2144, the processor component may employ the device ID, the datasession ID and one or more load balancing rules in executing the routingagent to select one of multiple PCRF components that are each alsoexecuted by the processor component in a separate VM (e.g., the PCRFcomponents 445 a-x). Again, the load balancing rules may includeselecting one of the multiple PCRF components based on relative levelsof activity, relative quantities of data sessions already bound to eachbased on device IDs and/or data session IDs, etc.

At 2146, the processor component may route the packet to the selectedone of the PCRF components. At 2148, the processor component may store,as part of a binding data in a storage of the EPC device, an indicationof which one of the PCRF components is now correlated to the device IDfor at least the data session that may be initiated if the request toinitiate communications services is granted. Again, in some embodiments,the data session ID assigned by the packet gateway may be stored alongwith the device ID to enable correlation of subsequent packets with theparticular data session ID as well as with the particular device ID.

However, if at 2140, the control message does not indicate reception ofa request for initiation of a data session, then at 2150, if the controlmessage indicates reception of a request for termination of an ongoingdata session (e.g., reception of a control message 135 from one of theendpoint devices 100 requesting termination of a data session), then theprocessor component may retrieve the device ID of the endpoint deviceassociated with the ongoing data session from the payload of the packetat 2152 as part of executing the routing agent. Again, as alsodiscussed, the processor component may also retrieve the data session IDassociated with that ongoing data session from the payload. At 2154, theprocessor component may remove from the storage (e.g., from the bindingdata) the indication of which one of the PCRF components is correlatedto the device ID for at least the ongoing data session that may bespecifically requested to be terminated.

However, if at 2150, the control message also does not indicatereception of a request for termination of an ongoing data session, thenthe control message may incorporate an indication of a request to updatean aspect of an ongoing data session. The processor component mayretrieve the device ID of the endpoint device associated with theongoing data session from the payload of the packet as part of executingthe routing agent. Again, the processor component may also retrieve thedata session ID of that ongoing data session from the payload. At 2164,the processor component may retrieve from the storage the indication ofwhich one of the PCRF components is correlated to the device ID for atleast the ongoing data session that may be specifically requested to beupdated (e.g., may be specified by the data session ID). At 2166, theprocessor component may route the packet to that one of the PCRFcomponents.

FIG. 8 illustrates an embodiment of an exemplary processing architecture3000 suitable for implementing various embodiments as previouslydescribed. More specifically, the processing architecture 3000 (orvariants thereof) may be implemented as part of one or more of thecomputing devices 100, 400 or 800. It should be noted that components ofthe processing architecture 3000 are given reference numbers in whichthe last two digits correspond to the last two digits of referencenumbers of at least some of the components earlier depicted anddescribed as part of the computing devices 100, 400 and 800. This isdone as an aid to correlating components of each.

The processing architecture 3000 includes various elements commonlyemployed in digital processing, including without limitation, one ormore processors, multi-core processors, co-processors, memory units,chipsets, controllers, peripherals, interfaces, oscillators, timingdevices, video cards, audio cards, multimedia input/output (I/O)components, power supplies, etc. As used in this application, the terms“system” and “component” are intended to refer to an entity of acomputing device in which digital processing is carried out, that entitybeing hardware, a combination of hardware and software, software, orsoftware in execution, examples of which are provided by this depictedexemplary processing architecture. For example, a component can be, butis not limited to being, a process running on a processor component, theprocessor component itself, a storage device (e.g., a hard disk drive,multiple storage drives in an array, etc.) that may employ an opticaland/or magnetic storage medium, a software object, an executablesequence of instructions, a thread of execution, a program, and/or anentire computing device (e.g., an entire computer). By way ofillustration, both an application running on a server and the server canbe a component. One or more components can reside within a processand/or thread of execution, and a component can be localized on onecomputing device and/or distributed between two or more computingdevices. Further, components may be communicatively coupled to eachother by various types of communications media to coordinate operations.The coordination may involve the uni-directional or bi-directionalexchange of information. For instance, the components may communicateinformation in the form of signals communicated over the communicationsmedia. The information can be implemented as signals allocated to one ormore signal lines. A message (including a command, status, address ordata message) may be one of such signals or may be a plurality of suchsignals, and may be transmitted either serially or substantially inparallel through any of a variety of connections and/or interfaces.

As depicted, in implementing the processing architecture 3000, acomputing device includes at least a processor component 950, a storage960, an interface 990 to other devices, and a coupling 959. As will beexplained, depending on various aspects of a computing deviceimplementing the processing architecture 3000, including its intendeduse and/or conditions of use, such a computing device may furtherinclude additional components, such as without limitation, a displayinterface 985.

The coupling 959 includes one or more buses, point-to-pointinterconnects, transceivers, buffers, crosspoint switches, and/or otherconductors and/or logic that communicatively couples at least theprocessor component 950 to the storage 960. Coupling 959 may furthercouple the processor component 950 to one or more of the interface 990,the audio subsystem 970 and the display interface 985 (depending onwhich of these and/or other components are also present). With theprocessor component 950 being so coupled by couplings 959, the processorcomponent 950 is able to perform the various ones of the tasks describedat length, above, for whichever one(s) of the aforedescribed computingdevices implement the processing architecture 3000. Coupling 959 may beimplemented with any of a variety of technologies or combinations oftechnologies by which signals are optically and/or electricallyconveyed. Further, at least portions of couplings 959 may employ timingsand/or protocols conforming to any of a wide variety of industrystandards, including without limitation, Accelerated Graphics Port(AGP), CardBus, Extended Industry Standard Architecture (E-ISA), MicroChannel Architecture (MCA), NuBus, Peripheral Component Interconnect(Extended) (PCI-X), PCI Express (PCI-E), Personal Computer Memory CardInternational Association (PCMCIA) bus, HyperTransport™, QuickPath, andthe like.

As previously discussed, the processor component 950 (which maycorrespond to the processor component 450) may include any of a widevariety of commercially available processors, employing any of a widevariety of technologies and implemented with one or more coresphysically combined in any of a number of ways.

As previously discussed, the storage 960 (which may correspond to thestorage 460) may be made up of one or more distinct storage devicesbased on any of a wide variety of technologies or combinations oftechnologies. More specifically, as depicted, the storage 960 mayinclude one or more of a volatile storage 961 (e.g., solid state storagebased on one or more forms of RAM technology), a non-volatile storage962 (e.g., solid state, ferromagnetic or other storage not requiring aconstant provision of electric power to preserve their contents), and aremovable media storage 963 (e.g., removable disc or solid state memorycard storage by which information may be conveyed between computingdevices). This depiction of the storage 960 as possibly includingmultiple distinct types of storage is in recognition of the commonplaceuse of more than one type of storage device in computing devices inwhich one type provides relatively rapid reading and writingcapabilities enabling more rapid manipulation of data by the processorcomponent 950 (but possibly using a “volatile” technology constantlyrequiring electric power) while another type provides relatively highdensity of non-volatile storage (but likely provides relatively slowreading and writing capabilities).

Given the often different characteristics of different storage devicesemploying different technologies, it is also commonplace for suchdifferent storage devices to be coupled to other portions of a computingdevice through different storage controllers coupled to their differingstorage devices through different interfaces. By way of example, wherethe volatile storage 961 is present and is based on RAM technology, thevolatile storage 961 may be communicatively coupled to coupling 959through a storage controller 965 a providing an appropriate interface tothe volatile storage 961 that perhaps employs row and column addressing,and where the storage controller 965 a may perform row refreshing and/orother maintenance tasks to aid in preserving information stored withinthe volatile storage 961. By way of another example, where thenon-volatile storage 962 is present and includes one or moreferromagnetic and/or solid-state disk drives, the non-volatile storage962 may be communicatively coupled to coupling 959 through a storagecontroller 965 b providing an appropriate interface to the non-volatilestorage 962 that perhaps employs addressing of blocks of informationand/or of cylinders and sectors. By way of still another example, wherethe removable media storage 963 is present and includes one or moreoptical and/or solid-state disk drives employing one or more pieces ofmachine-readable storage medium 969, the removable media storage 963 maybe communicatively coupled to coupling 959 through a storage controller965 c providing an appropriate interface to the removable media storage963 that perhaps employs addressing of blocks of information, and wherethe storage controller 965 c may coordinate read, erase and writeoperations in a manner specific to extending the lifespan of themachine-readable storage medium 969.

One or the other of the volatile storage 961 or the non-volatile storage962 may include an article of manufacture in the form of amachine-readable storage media on which a routine including a sequenceof instructions executable by the processor component 950 may be stored,depending on the technologies on which each is based. By way of example,where the non-volatile storage 962 includes ferromagnetic-based diskdrives (e.g., so-called “hard drives”), each such disk drive typicallyemploys one or more rotating platters on which a coating of magneticallyresponsive particles is deposited and magnetically oriented in variouspatterns to store information, such as a sequence of instructions, in amanner akin to storage medium such as a floppy diskette. By way ofanother example, the non-volatile storage 962 may be made up of banks ofsolid-state storage devices to store information, such as sequences ofinstructions, in a manner akin to a compact flash card. Again, it iscommonplace to employ differing types of storage devices in a computingdevice at different times to store executable routines and/or data.Thus, a routine including a sequence of instructions to be executed bythe processor component 950 may initially be stored on themachine-readable storage medium 969, and the removable media storage 963may be subsequently employed in copying that routine to the non-volatilestorage 962 for longer term storage not requiring the continuingpresence of the machine-readable storage medium 969 and/or the volatilestorage 961 to enable more rapid access by the processor component 950as that routine is executed.

As previously discussed, the interface 990 (which may correspond to theinterface(s) 490) may employ any of a variety of signaling technologiescorresponding to any of a variety of communications technologies thatmay be employed to communicatively couple a computing device to one ormore other devices. Again, one or both of various forms of wired orwireless signaling may be employed to enable the processor component 950to interact with input/output devices (e.g., the depicted examplekeyboard 920 or printer 925) and/or other computing devices, possiblythrough a network (e.g., the network 999) or an interconnected set ofnetworks. In recognition of the often greatly different character ofmultiple types of signaling and/or protocols that must often besupported by any one computing device, the interface 990 is depicted asincluding multiple different interface controllers 995 a, 995 b and 995c. The interface controller 995 a may employ any of a variety of typesof wired digital serial interface or radio frequency wireless interfaceto receive serially transmitted messages from user input devices, suchas the depicted keyboard 920. The interface controller 995 b may employany of a variety of cabling-based or wireless signaling, timings and/orprotocols to access other computing devices through the depicted network999 (perhaps a network made up of one or more links, smaller networks,or perhaps the Internet). More specifically, the interface controller995 b may incorporate one or more radio frequency (RF) transceiversand/or may be coupled to one or more antennae 991 (which may beincorporated into a portion of the interface 990) to exchange RFwireless signals with antenna(e) of one or more other devices as part ofwireless communications on the depicted network 999. The interface 995 cmay employ any of a variety of electrically conductive cabling enablingthe use of either serial or parallel signal transmission to convey datato the depicted printer 925. Other examples of devices that may becommunicatively coupled through one or more interface controllers of theinterface 990 include, without limitation, a microphone to monitorsounds of persons to accept commands and/or data signaled by thosepersons via voice or other sounds they may make, remote controls, styluspens, card readers, finger print readers, virtual reality interactiongloves, graphical input tablets, joysticks, other keyboards, retinascanners, the touch input component of touch screens, trackballs,various sensors, a camera or camera array to monitor movement of personsto accept commands and/or data signaled by those persons via gesturesand/or facial expressions, laser printers, inkjet printers, mechanicalrobots, milling machines, etc.

Where a computing device is communicatively coupled to (or perhaps,actually incorporates) a display (e.g., the depicted example display980), such a computing device implementing the processing architecture3000 may also include the display interface 985. Although moregeneralized types of interface may be employed in communicativelycoupling to a display, the somewhat specialized additional processingoften required in visually displaying various forms of content on adisplay, as well as the somewhat specialized nature of the cabling-basedinterfaces used, often makes the provision of a distinct displayinterface desirable. Wired and/or wireless signaling technologies thatmay be employed by the display interface 985 in a communicative couplingof the display 980 may make use of signaling and/or protocols thatconform to any of a variety of industry standards, including withoutlimitation, any of a variety of analog video interfaces, Digital VideoInterface (DVI), DisplayPort, etc.

More generally, the various elements of the computing devices describedand depicted herein may include various hardware elements, softwareelements, or a combination of both. Examples of hardware elements mayinclude devices, logic devices, components, processors, microprocessors,circuits, processor components, circuit elements (e.g., transistors,resistors, capacitors, inductors, and so forth), integrated circuits,application specific integrated circuits (ASIC), programmable logicdevices (PLD), digital signal processors (DSP), field programmable gatearray (FPGA), memory units, logic gates, registers, semiconductordevice, chips, microchips, chip sets, and so forth. Examples of softwareelements may include software components, programs, applications,computer programs, application programs, system programs, softwaredevelopment programs, machine programs, operating system software,middleware, firmware, software modules, routines, subroutines,functions, methods, procedures, software interfaces, application programinterfaces (API), instruction sets, computing code, computer code, codesegments, computer code segments, words, values, symbols, or anycombination thereof. However, determining whether an embodiment isimplemented using hardware elements and/or software elements may vary inaccordance with any number of factors, such as desired computationalrate, power levels, heat tolerances, processing cycle budget, input datarates, output data rates, memory resources, data bus speeds and otherdesign or performance constraints, as desired for a givenimplementation.

Some embodiments may be described using the expression “one embodiment”or “an embodiment” along with their derivatives. These terms mean that aparticular feature, structure, or characteristic described in connectionwith the embodiment is included in at least one embodiment. Theappearances of the phrase “in one embodiment” in various places in thespecification are not necessarily all referring to the same embodiment.Further, some embodiments may be described using the expression“coupled” and “connected” along with their derivatives. These terms arenot necessarily intended as synonyms for each other. For example, someembodiments may be described using the terms “connected” and/or“coupled” to indicate that two or more elements are in direct physicalor electrical contact with each other. The term “coupled,” however, mayalso mean that two or more elements are not in direct contact with eachother, but yet still co-operate or interact with each other.Furthermore, aspects or elements from different embodiments may becombined.

It is emphasized that the Abstract of the Disclosure is provided toallow a reader to quickly ascertain the nature of the technicaldisclosure. It is submitted with the understanding that it will not beused to interpret or limit the scope or meaning of the claims. Inaddition, in the foregoing Detailed Description, it can be seen thatvarious features are grouped together in a single embodiment for thepurpose of streamlining the disclosure. This method of disclosure is notto be interpreted as reflecting an intention that the claimedembodiments require more features than are expressly recited in eachclaim. Rather, as the following claims reflect, inventive subject matterlies in less than all features of a single disclosed embodiment. Thusthe following claims are hereby incorporated into the DetailedDescription, with each claim standing on its own as a separateembodiment. In the appended claims, the terms “including” and “in which”are used as the plain-English equivalents of the respective terms“comprising” and “wherein,” respectively. Moreover, the terms “first,”“second,” “third,” and so forth, are used merely as labels, and are notintended to impose numerical requirements on their objects.

What has been described above includes examples of the disclosedarchitecture. It is, of course, not possible to describe everyconceivable combination of components and/or methodologies, but one ofordinary skill in the art may recognize that many further combinationsand permutations are possible. Accordingly, the novel architecture isintended to embrace all such alterations, modifications and variationsthat fall within the spirit and scope of the appended claims. Thedetailed disclosure now turns to providing examples that pertain tofurther embodiments. The examples provided below are not intended to belimiting.

In Example 1, an apparatus includes a processor component; an interfaceto couple the processor component to a wireless cellular network; avirtual switch to retrieve a device identifier of an endpoint devicefrom a payload of a packet and to select a policy charging and rulesfunction (PCRF) component to which to route the packet based at least onthe device identifier, the endpoint device coupled to the wirelesscellular network; and the selected PCRF component to grant a datasession to the endpoint device based on an indication of a request bythe endpoint device for the data session conveyed in the payload, thedata session including an exchange of data between the endpoint deviceand the interface device through the wireless cellular network.

In Example 2, which includes the subject matter of Example 1, theapparatus may include a virtual environment component to provide amultitude of virtual machines (VMs); and a multitude of PCRF components,where each PCRF component of a multitude of PCRF components may beexecuted within one of the VMs of the multitude of VMs, and themultitude of PCRF components may include the PCRF component.

In Example 3, which includes the subject matter of any of Examples 1-2,the virtual switch may route packets among the multiple VMs to enable atleast a subset of the VMs to access the interface.

In Example 4, which includes the subject matter of any of Examples 1-3,the virtual switch may analyze a header of the packet to determinewhether the packet is of a packet type to convey a control message inthe payload, condition the retrieval of the device identifier on thedetermination of packet type, and select a component of a wirelesscommunications system to which to route the packet based on anindication of a destination in the header based on the determination ofpacket type, the selected component executed within a VM of themultitude of VMs, and the control message may include at least one ofthe indication of the request for the data session, an indication of arequest to update an aspect of the data session or a request toterminate the data session.

In Example 5, which includes the subject matter of any of Examples 1-4,the indication of a destination may include an Internet Protocol (IP)address.

In Example 6, which includes the subject matter of any of Examples 1-5,the aspect may include which cell of multiple cells of the wirelesscellular network the endpoint device is moved to.

In Example 7, which includes the subject matter of any of Examples 1-6,the apparatus may include a policy charging and enforcement function(PCEF) component to enforce a policy on the data session, the virtualswitch may retrieve account data associated with the device ID todetermine a status of the account associated with the device ID, and tocondition the grant of the data session on the determination of statusof the account, and to configure the PCEF component to enforce thepolicy, the policy associated with the account.

In Example 8, which includes the subject matter of any of Examples 1-7,the data session may include an exchange of data between the endpointdevice and another device through the interface, and the policy mayinclude at least one of a rate of charging based on a quantity of dataexchanged through the data session, a rate of charging based on a typeof data exchanged through the data session, a rate of charging based onwhether the other device is directly coupled to the wireless cellularnetwork, or a specified quality of service (QoS) that includes aspecified maximum rate of exchange of data through the data session.

In Example 9, which includes the subject matter of any of Examples 1-8,the virtual switch may select the PCRF component to which to route thepacket based on a load balancing rule and the device identifier; and theload balancing rule may include at least one of balancing the binding ofdata sessions among a multitude of PCRF components or balancing thebinding of endpoint devices among the multitude of PCRF components, themultitude of PCRF components including the PCRF component.

In Example 10, which includes the subject matter of any of Examples 1-9,the virtual switch may retrieve another device identifier from anotherpayload of another packet, and may select the PCRF component to which toroute the other packet based at least on the other device identifiermatching the device identifier of the endpoint device to bind at leastthe data session to the PCRF component.

In Example 11, which includes the subject matter of any of Examples1-10, the data session may be assigned a data session identifier, andthe virtual switch may retrieve another data session identifier fromanother payload of another packet, and may select the PCRF component towhich to route the other packet based at least on the other data sessionidentifier matching the data session identifier of the data session tobind the data session to the PCRF component.

In Example 12, which includes the subject matter of any of Examples1-11, the apparatus may include a packet gateway to generate the packetto conform to the Diameter protocol and to provide the packet to thevirtual switch in response to receipt of the request for the datasession via the interface.

In Example 13, which includes the subject matter of any of Examples1-12, the apparatus may include a serving gateway to track movement ofthe endpoint device among multiple cells of the wireless cellularnetwork through the interface.

In Example 14, a computing-implemented method includes retrieving, at avirtual switch of an evolved packet core (EPC) device, a deviceidentifier of an endpoint device from a payload of a packet, the EPCdevice and the endpoint device coupled to a wireless cellular network;selecting, at the virtual switch, a policy charging and rules function(PCRF) component of the EPC device to which to route the packet based atleast on the device identifier; and granting, at the selected PCRFcomponent, a data session to the endpoint device based on an indicationof a request by the endpoint device for the data session conveyed in thepayload, the data session including an exchange of data between theendpoint device and the EPC device through the wireless cellularnetwork.

In Example 15, which includes the subject matter of Example 14, themethod may include analyzing, at the virtual switch, a header of thepacket to determine whether the packet is of a packet type to convey acontrol message in the payload, the control message including theindication of the request for the data session; conditioning theretrieving of the device identifier on the determination of packet type;and selecting, at the virtual switch and based on the determination ofpacket type, a component of a wireless communications system within theEPC device to which to route the packet based on an indication of adestination in the header.

In Example 16, which includes the subject matter of any of Examples14-15, the indication of a destination may include an Internet Protocol(IP) address.

In Example 17, which includes the subject matter of any of Examples14-16, the aspect may include which cell of multiple cells of thewireless cellular network the endpoint device is moved to.

In Example 18, which includes the subject matter of any of Examples14-17, the method may include retrieving, at the selected PCRFcomponent, account data associated with the device ID to determine astatus of an account associated with the device ID; conditioning thegranting of the data session on the determination of status of theaccount; and configuring a policy charging and enforcement function(PCEF) component of the EPC device to enforce a policy associated withthe account on the data session.

In Example 19, which includes the subject matter of any of Examples14-18, the data session may include an exchange of data between theendpoint device and another device through the EPC device, and thepolicy may include at least one of a rate of charging based on aquantity of data exchanged through the data session, a rate of chargingbased on a type of data exchanged through the data session, a rate ofcharging based on whether the other device is directly coupled to thewireless cellular network, or a specified quality of service (QoS) thatincludes a specified maximum rate of exchange of data through the datasession.

In Example 20, which includes the subject matter of any of Examples14-19, the method may include selecting the PCRF component to which toroute the packet based on a load balancing rule and the deviceidentifier; the load balancing rule including at least one of balancingthe binding of data sessions among a multitude of PCRF components withinthe EPC device or balancing the binding of endpoint devices among themultitude of PCRF components, and the multitude of PCRF componentsincluding the PCRF component.

In Example 21, which includes the subject matter of any of Examples14-20, the method may include retrieving, at the virtual switch, anotherdevice identifier from another payload of another packet; and selecting,at the virtual switch, the PCRF component to which to route the otherpacket based at least on the other device identifier matching the deviceidentifier of the endpoint device to bind at least the data session tothe PCRF component.

In Example 22, which includes the subject matter of any of Examples14-21, the data session assigned a data session identifier, the methodmay include retrieving, at the virtual switch, another data sessionidentifier from another payload of another packet; and selecting, at thevirtual switch, the PCRF component to which to route the other packetbased at least on the other data session identifier matching the datasession identifier of the data session to bind the data session to thePCRF component.

In Example 23, which includes the subject matter of any of Examples14-22, the method may include providing a multitude of virtual machines(VMs) within the EPC device; executing each PCRF component of amultitude of PCRF components within one of the VMs of the multitude ofVMs, the multitude of PCRF components including the PCRF component; andexecuting the virtual switch to route packets among the multiple VMs toenable at least a subset of the VMs to access an interface of the EPCdevice that is coupled to the wireless cellular network.

In Example 24, which includes the subject matter of any of Examples14-23, the method may include executing the virtual switch to enable atleast the subset of the VMs to access another interface of the EPCdevice that is coupled to the Internet.

In Example 25, which includes the subject matter of any of Examples14-24, the method may include generating the packet to conform to theDiameter protocol in response to receipt by the EPC of the request forthe data session from the endpoint device.

In Example 26, at least one tangible machine-readable storage mediumincludes instructions that when executed by a processor component, maycause the processor component to retrieve, at a virtual switch of anevolved packet core (EPC) device, a device identifier of an endpointdevice from a payload of a packet, the EPC device and the endpointdevice coupled to a wireless cellular network; select, at the virtualswitch, a policy charging and rules function (PCRF) component of the EPCdevice to which to route the packet based at least on the deviceidentifier; and grant, at the selected PCRF component, a data session tothe endpoint device based on an indication of a request by the endpointdevice for the data session conveyed in the payload, the data sessionincluding an exchange of data between the endpoint device and the EPCdevice through the wireless cellular network.

In Example 27, which includes the subject matter of Example 26, theprocessor component may be caused to analyze, at the virtual switch, aheader of the packet to determine whether the packet is of a packet typeto convey a control message in the payload, the control messageincluding the indication of the request for the data session; conditionthe retrieval of the device identifier on the determination of packettype; and select, at the virtual switch and based on the determinationof packet type, a component of a wireless communications system withinthe EPC device to which to route the packet based on an indication of adestination in the header.

In Example 28, which includes the subject matter of any of Examples26-27, the indication of a destination may include an Internet Protocol(IP) address.

In Example 29, which includes the subject matter of any of Examples26-28, the aspect may include which cell of multiple cells of thewireless cellular network the endpoint device is moved to.

In Example 30, which includes the subject matter of any of Examples26-29, the processor component may be caused to retrieve, at theselected PCRF component, account data associated with the device ID todetermine a status of an account associated with the device ID;condition the grant of the data session on the determination of statusof the account; and configure a policy charging and enforcement function(PCEF) component of the EPC device to enforce a policy associated withthe account on the data session.

In Example 31, which includes the subject matter of any of Examples26-30, the data session may include an exchange of data between theendpoint device and another device through the EPC device, and thepolicy may include at least one of a rate of charging based on aquantity of data exchanged through the data session, a rate of chargingbased on a type of data exchanged through the data session, a rate ofcharging based on whether the other device is directly coupled to thewireless cellular network, or a specified quality of service (QoS) thatincludes a specified maximum rate of exchange of data through the datasession.

In Example 32, which includes the subject matter of any of Examples26-31, the processor component may be caused to select the PCRFcomponent to which to route the packet based on a load balancing ruleand the device identifier; where the load balancing rule may include atleast one of balancing the binding of data sessions among a multitude ofPCRF components within the EPC device or balancing the binding ofendpoint devices among the multitude of PCRF components, the multitudeof PCRF components including the PCRF component.

In Example 33, which includes the subject matter of any of Examples26-32, the processor component may be caused to retrieve, at the virtualswitch, another device identifier from another payload of anotherpacket; and select, at the virtual switch, the PCRF component to whichto route the other packet based at least on the other device identifiermatching the device identifier of the endpoint device to bind at leastthe data session to the PCRF component.

In Example 34, which includes the subject matter of any of Examples26-33, the data session assigned a data session identifier, and theprocessor component may be caused to retrieve, at the virtual switch,another data session identifier from another payload of another packet;and select, at the virtual switch, the PCRF component to which to routethe other packet based at least on the other data session identifiermatching the data session identifier of the data session to bind thedata session to the PCRF component.

In Example 35, which includes the subject matter of any of Examples26-34, the processor component may be caused to provide a multitude ofvirtual machines (VMs) within the EPC device; execute each PCRFcomponent of a multitude of PCRF components within one of the VMs of themultitude of VMs, the multitude of PCRF components including the PCRFcomponent; and execute the virtual switch to route packets among themultiple VMs to enable at least a subset of the VMs to access aninterface of the EPC device that is coupled to the wireless cellularnetwork.

In Example 36, which includes the subject matter of any of Examples26-35, the processor component may be caused to execute the virtualswitch to enable at least the subset of the VMs to access anotherinterface of the EPC device that is coupled to the Internet.

In Example 37, which includes the subject matter of any of Examples26-36, the processor component may be caused to generate the packet toconform to the Diameter protocol in response to receipt by the EPC ofthe request for the data session from the endpoint device.

In Example 38, an apparatus includes a processor component; an interfaceto couple the processor component to a wireless cellular network; avirtual switch to retrieve a device identifier of an endpoint devicefrom a payload of a packet and to select a policy charging and rulesfunction (PCRF) component to which to route the packet based at least onthe device identifier matching another device identifier retrieved fromanother payload of another packet, the endpoint device coupled to thewireless cellular network; and the selected PCRF component to update anaspect of a data session based on a indication of a request to updatethe aspect of the data session conveyed in the payload, the data sessionincluding an exchange of data between the endpoint device and theinterface device through the wireless cellular network.

In Example 39, which includes the subject matter of Example 38, theapparatus may include a serving gateway to track movement of theendpoint device among multiple cells of the wireless cellular networkthrough the interface.

In Example 40, which includes the subject matter of any of Examples38-39, the apparatus may include a packet gateway may generate thepacket and may provide the packet to the virtual switch in response toreceipt of the request to update an aspect of the data session, theaspect including a movement of the endpoint device from one cell of themultiple cells to another cell of the multiple cells.

In Example 41, which includes the subject matter of any of Examples38-40, the apparatus may include a virtual environment component toprovide a multitude of virtual machines (VMs); and a multitude of PCRFcomponents, each PCRF component of a multitude of PCRF componentsexecuted within one of the VMs of the multitude of VMs, and themultitude of PCRF components including the PCRF component.

In Example 42, which includes the subject matter of any of Examples38-41, the virtual switch may route packets among the multiple VMs toenable at least a subset of the VMs to access the interface.

In Example 43, which includes the subject matter of any of Examples38-42, the virtual switch may analyze a header of the packet todetermine whether the packet is of a packet type to convey a controlmessage in the payload, condition the retrieval of the device identifieron the determination of packet type, and select a component of awireless communications system to which to route the packet based on anindication of a destination in the header based on the determination ofpacket type, the selected component executed within a VM of themultitude of VMs, and the control message including at least one of theindication of the request for the data session, an indication of arequest to update an aspect of the data session or a request toterminate the data session.

In Example 44, which includes the subject matter of any of Examples38-43, the indication of a destination may include an Internet Protocol(IP) address.

In Example 45, which includes the subject matter of any of Examples38-44, the aspect may include which cell of multiple cells of thewireless cellular network the endpoint device is moved to.

In Example 46, at least one tangible machine-readable storage medium mayinclude instructions that when executed by a processor component, causethe processor component to perform any of the above.

In Example 47, an apparatus may include means for performing any of theabove.

1. An apparatus to control wireless communications comprising: aprocessor component; an interface to couple the processor component to awireless network; a virtual switch to retrieve a device identifier of anendpoint device from a payload of a packet and to select a policycharging and rules function (PCRF) component to which to route thepacket based at least on the device identifier, the endpoint devicecoupled to the wireless network; and the selected PCRF component togrant a data session to the endpoint device based on an indication of arequest by the endpoint device for the data session conveyed in thepayload, the data session comprising an exchange of data between theendpoint device and the interface device through the wireless network.2. The apparatus of claim 1, comprising a virtual environment componentto provide a multitude of virtual machines (VMs); and a multitude ofPCRF components, each PCRF component of a multitude of PCRF componentsexecuted within one of the VMs of the multitude of VMs, and themultitude of PCRF components comprising the PCRF component.
 3. Theapparatus of claim 2, the virtual switch to analyze a header of thepacket to determine whether the packet is of a packet type to convey acontrol message in the payload, condition the retrieval of the deviceidentifier on the determination of packet type, and select a componentof a wireless communications system to which to route the packet basedon an indication of a destination in the header based on thedetermination of packet type, the selected component executed within aVM of the multitude of VMs, and the control message comprising at leastone of the indication of the request for the data session, an indicationof a request to update an aspect of the data session or a request toterminate the data session.
 4. The apparatus of claim 1, comprising apolicy charging and enforcement function (PCEF) component to enforce apolicy on the data session, the virtual switch to retrieve account dataassociated with the device ID to determine a status of the accountassociated with the device ID, to condition the grant of the datasession on the determination of status of the account, and to configurethe PCEF component to enforce the policy, the policy associated with theaccount.
 5. The apparatus of claim 4, the data session comprising anexchange of data between the endpoint device and another device throughthe interface, and the policy comprising at least one of a rate ofcharging based on a quantity of data exchanged through the data session,a rate of charging based on a type of data exchanged through the datasession, a rate of charging based on whether the other device isdirectly coupled to the wireless network, or a specified quality ofservice (QoS) that comprises a specified maximum rate of exchange ofdata through the data session.
 6. The apparatus of claim 1, the virtualswitch to retrieve another device identifier from another payload ofanother packet, and to select the PCRF component to which to route theother packet based at least on the other device identifier matching thedevice identifier of the endpoint device to bind at least the datasession to the PCRF component.
 7. A computer-implemented method forcontrolling wireless communications comprising: retrieving, at a virtualswitch of an evolved packet core (EPC) device, a device identifier of anendpoint device from a payload of a packet, the EPC device and theendpoint device coupled to a wireless network; selecting, at the virtualswitch, a policy charging and rules function (PCRF) component of the EPCdevice to which to route the packet based at least on the deviceidentifier; and granting, at the selected PCRF component, a data sessionto the endpoint device based on an indication of a request by theendpoint device for the data session conveyed in the payload, the datasession comprising an exchange of data between the endpoint device andthe EPC device through the wireless network.
 8. The computer-implementedmethod of claim 7, the method comprising: analyzing, at the virtualswitch, a header of the packet to determine whether the packet is of apacket type to convey a control message in the payload, the controlmessage comprising the indication of the request for the data session;conditioning the retrieving of the device identifier on thedetermination of packet type; and selecting, at the virtual switch andbased on the determination of packet type, a component of a wirelesscommunications system within the EPC device to which to route the packetbased on an indication of a destination in the header.
 9. Thecomputer-implemented method of claim 7, the method comprising:retrieving, at the selected PCRF component, account data associated withthe device ID to determine a status of an account associated with thedevice ID; conditioning the granting of the data session on thedetermination of status of the account; and configuring a policycharging and enforcement function (PCEF) component of the EPC device toenforce a policy associated with the account on the data session. 10.The computer-implemented method of claim 9, the data session comprisingan exchange of data between the endpoint device and another devicethrough the EPC device, and the policy comprising at least one of a rateof charging based on a quantity of data exchanged through the datasession, a rate of charging based on a type of data exchanged throughthe data session, a rate of charging based on whether the other deviceis directly coupled to the wireless network, or a specified quality ofservice (QoS) that comprises a specified maximum rate of exchange ofdata through the data session.
 11. The computer-implemented method ofclaim 7, the method comprising selecting the PCRF component to which toroute the packet based on a load balancing rule and the deviceidentifier; the load balancing rule comprising at least one of balancingthe binding of data sessions among a multitude of PCRF components withinthe EPC device or balancing the binding of endpoint devices among themultitude of PCRF components, the multitude of PCRF componentscomprising the PCRF component.
 12. The computer-implemented method ofclaim 7, the data session assigned a data session identifier, the methodcomprising: retrieving, at the virtual switch, another data sessionidentifier from another payload of another packet; and selecting, at thevirtual switch, the PCRF component to which to route the other packetbased at least on the other data session identifier matching the datasession identifier of the data session to bind the data session to thePCRF component.
 13. The computer-implemented method of claim 7, themethod comprising: providing a multitude of virtual machines (VMs)within the EPC device; executing each PCRF component of a multitude ofPCRF components within one of the VMs of the multitude of VMs, themultitude of PCRF components comprising the PCRF component; andexecuting the virtual switch to route packets among the multiple VMs toenable at least a subset of the VMs to access an interface of the EPCdevice that is coupled to the wireless network.
 14. An apparatus tocontrol wireless communications comprising: a processor component; aninterface to couple the processor component to a wireless network; avirtual switch to retrieve a device identifier of an endpoint devicefrom a payload of a packet and to select a policy charging and rulesfunction (PCRF) component to which to route the packet based at least onthe device identifier matching another device identifier retrieved fromanother payload of another packet, the endpoint device coupled to thewireless network; and the selected PCRF component to update an aspect ofa data session based on a indication of a request to update the aspectof the data session conveyed in the payload, the data session comprisingan exchange of data between the endpoint device and the interface devicethrough the wireless network.
 15. The apparatus of claim 14, comprisinga serving gateway to track movement of the endpoint device amongmultiple cells of the wireless network through the interface.
 16. Theapparatus of claim 15, comprising a packet gateway to generate thepacket and to provide the packet to the virtual switch in response toreceipt of the request to update an aspect of the data session, theaspect comprising a movement of the endpoint device from one cell of themultiple cells to another cell of the multiple cells.
 17. The apparatusof claim 14, comprising a virtual environment component to provide amultitude of virtual machines (VMs); and a multitude of PCRF components,each PCRF component of a multitude of PCRF components executed withinone of the VMs of the multitude of VMs, and the multitude of PCRFcomponents comprising the PCRF component.
 18. The apparatus of claim 17,the virtual switch to route packets among the multiple VMs to enable atleast a subset of the VMs to access the interface.
 19. At least onetangible machine-readable storage medium comprising instructions thatwhen executed by a processor component, cause the processor componentto: retrieve, at a virtual switch of an evolved packet core (EPC)device, a device identifier of an endpoint device from a payload of apacket, the EPC device and the endpoint device coupled to a wirelessnetwork; select, at the virtual switch, a policy charging and rulesfunction (PCRF) component of the EPC device to which to route the packetbased at least on the device identifier; and grant, at the selected PCRFcomponent, a data session to the endpoint device based on an indicationof a request by the endpoint device for the data session conveyed in thepayload, the data session comprising an exchange of data between theendpoint device and the EPC device through the wireless network.
 20. Theat least one tangible machine-readable storage medium of claim 19, theprocessor component caused to: analyze, at the virtual switch, a headerof the packet to determine whether the packet is of a packet type toconvey a control message in the payload, the control message comprisingthe indication of the request for the data session; condition theretrieval of the device identifier on the determination of packet type;and select, at the virtual switch and based on the determination ofpacket type, a component of a wireless communications system within theEPC device to which to route the packet based on an indication of adestination in the header.
 21. The at least one tangiblemachine-readable storage medium of claim 20, the aspect comprising whichcell of multiple cells of the wireless network the endpoint device ismoved to.
 22. The at least one tangible machine-readable storage mediumof claim 19, the processor component caused to select the PCRF componentto which to route the packet based on a load balancing rule and thedevice identifier; the load balancing rule comprising at least one ofbalancing the binding of data sessions among a multitude of PCRFcomponents within the EPC device or balancing the binding of endpointdevices among the multitude of PCRF components, the multitude of PCRFcomponents comprising the PCRF component.
 23. The at least one tangiblemachine-readable storage medium of claim 19, the processor componentcaused to: retrieve, at the virtual switch, another device identifierfrom another payload of another packet; and select, at the virtualswitch, the PCRF component to which to route the other packet based atleast on the other device identifier matching the device identifier ofthe endpoint device to bind at least the data session to the PCRFcomponent.
 24. The at least one tangible machine-readable storage mediumof claim 19, the processor component caused to: provide a multitude ofvirtual machines (VMs) within the EPC device; execute each PCRFcomponent of a multitude of PCRF components within one of the VMs of themultitude of VMs, the multitude of PCRF components comprising the PCRFcomponent; and execute the virtual switch to route packets among themultiple VMs to enable at least a subset of the VMs to access aninterface of the EPC device that is coupled to the wireless network. 25.The at least one tangible machine-readable storage medium of claim 19,the processor component caused to generate the packet to conform to theDiameter protocol in response to receipt by the EPC of the request forthe data session from the endpoint device.